Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: wwiRfNrsr/pYs0qLzAIOv5v7hVP4+qZ79+wwWDJivIQ=
Subject key identifier: 0C:31:47:A9:0D:38:6B:EE:88:BE:E8:4E:AE:EC:64:F3:29:73:AC:E6
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019921B1CDF8AD821C44C4AA6A7CB32F2A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 11CB
Signing time: Sun 07 Sep 2025 01:02:04 +0000
Manifest this update: Sun 07 Sep 2025 01:02:04 +0000
Manifest next update: Mon 08 Sep 2025 01:02:04 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: C3MBzMcugt9P2bEbrbnzsz7iK3L4Qu4sxMpAxsR5we0=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:cd:f8:ad:82:1c:44:c4:aa:6a:7c:b3:2f:2a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Sep 7 01:02:04 2025 GMT
Not After : Sep 8 01:02:04 2025 GMT
Subject: CN=0c3147a90d386bee88bee84eaeec64f32973ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:3e:db:08:fd:c5:98:7d:c1:9b:8c:27:15:
6d:1b:75:3e:5a:7a:77:5c:b0:90:57:4a:92:1b:86:
c6:e3:4f:a1:d3:35:62:0b:38:52:3b:85:3a:af:b9:
aa:90:03:65:fa:22:59:8a:79:92:5e:87:17:53:76:
88:5c:5a:2d:af:d9:d4:e2:f8:52:e8:66:14:dc:d3:
56:a2:23:5f:fe:e8:b1:bb:7a:89:38:26:78:59:12:
a9:d3:69:f1:be:74:18:32:d6:ad:3c:0a:fd:14:17:
97:b6:10:8f:ed:2a:34:96:9a:e8:69:b1:c4:64:61:
a0:10:68:b9:49:03:7a:d1:bb:34:9a:70:60:f7:44:
d5:99:14:5b:ed:e1:7f:83:c9:b9:44:e0:fc:53:ff:
ff:5e:1e:52:0b:01:91:84:86:6f:0a:67:d8:4a:38:
e9:86:ce:20:ec:f9:c9:dc:b9:37:f7:e7:59:7a:b7:
ed:d6:dd:34:6e:46:8f:a7:93:9c:af:5d:bf:06:6f:
2f:97:6a:e5:72:bc:cf:08:a7:3a:89:74:d4:e9:d1:
54:c4:1f:b1:05:ec:30:f3:0a:23:0b:ed:d7:d0:db:
be:52:b3:1c:a0:44:60:2f:27:9a:4f:5e:70:1f:51:
4b:07:b8:7b:08:1e:d3:b2:34:a8:c0:c7:b4:90:21:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:47:A9:0D:38:6B:EE:88:BE:E8:4E:AE:EC:64:F3:29:73:AC:E6
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cf:9a:67:cf:a2:e5:f5:ee:89:12:c7:6f:6f:a9:7a:2b:4e:
38:29:90:2d:af:a3:69:2e:0a:db:61:08:0e:00:03:84:ad:cd:
2a:03:6c:9a:13:de:0f:43:56:1c:a4:45:a2:a0:be:cc:d6:c1:
b7:9e:35:16:49:b0:a7:dc:63:b9:b1:e0:d4:51:8c:80:8f:16:
3c:24:3e:15:bd:32:39:e4:5a:9a:72:9b:aa:9d:53:de:7d:49:
6d:70:ee:fb:0d:7e:6c:69:e3:bd:13:aa:c6:fd:4e:3f:bb:99:
38:91:6d:a9:36:df:fd:94:64:93:57:34:fb:cc:13:39:b1:8b:
42:51:3f:10:ed:41:b0:e1:23:5b:8a:69:61:fe:78:d9:7f:02:
85:39:65:aa:7a:d1:6d:5b:22:4f:4a:90:76:4a:b4:12:93:c7:
8e:63:63:6d:ac:50:4a:89:51:45:74:89:4b:27:a4:26:dd:6a:
4e:20:23:d8:73:9b:9a:06:60:9a:bf:c5:69:bd:46:78:e2:3c:
1a:6f:c7:da:34:55:9d:c2:b0:ac:dc:d1:e8:94:7d:ca:61:78:
fa:5e:3e:91:d5:c7:c4:55:26:67:d4:e5:8b:0f:13:a4:99:d4:
c1:59:e5:15:74:30:6c:6a:73:d4:a3:17:05:6d:b9:88:c2:55:
cb:fe:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:08 2025 by rpki-client